AMENDMENTS TO THE SPECIFICATION 
Please delete the paragraph at lines 3-13, on page 4, and replace it as follows: 
Suppose that the hospital 120 procures eye laser equipment 122. Only authorized users, 
which is associated with permission 116, with the appropriate training may access and use the 
eye laser equipment 122 (which has a computer system to which a user must log on to operate 
the eye laser equipment 122). One such user is the user 102 (Dr. Murphy, the surgeon). 
However, the role-based access model prohibits permitting of a specific user to have access to a 
specific piece of content (so as to avoid permission explosion). Instead of trying to understand 
existing roles in the system 100, a system administrator of the hospital 120 fabricates a new role 
of "Dr. Murphy, the surgeon" (role 110) so as to allow only the user 102 (Dr. Murphy, the 
surgeon) to use the eye laser equipment. The problem, however, is that role 1 10 is not a role at 
all. If there were a thousand doctors, each doctor would require his own role, thereby creating 
permission explosion again. 

Please delete the paragraph at lines 4-20, on page 19, and replace it as follows: 
The portion of the licensing security space 332 is presented in a table in which 
information is contained at row-column intersections. The table form facilitates discussion but 
information of the portion of the licensing security space 332 need not be in table form and can 
be in other suitable forms. One such suitable form includes a hierarchical graph, such as a 
directed acyclic graph. Row 332RA contains four cells, which have category designations for 
each dimension defining the portion of the licensing security space 332. For example, 
cell 332RA, 332CA defines a "sales location" dimension; cell 332RA, 332CB defines a 
"licensing program" dimension; cell 332RA, 332CC defines a "customer type" dimension; and 
cell 332RA, 332CD defines an "agreement type" dimension. Cells in column 332CA (and rows 
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332RB-332RE) contain members of the "sales location" dimension, such as United States, 
China, Germany, and Russia; cells in column 332CB (and rows 332RB-332RE) define members 
of the "licensing program" dimension, such as selection 4, selection 5, open, and school. Cells in 
332CC (and rows 332RB-332RE) define members of the "customer type" dimension, such as 
direct, OEM, VAR, and ISV; and cells in column 332CD (and rows 332RB-332RE) define 
members of the "agreement type" dimension, such as corporation, academic, and government. 
The portion of the licensing security space 332 can be used in conjunction with the security 
language 330 to define access scopes for users 318A-318C and the piece of content 326 to limit 
unauthorized access. 

Please delete the paragraph at lines 1 8-26, on page 30, and replace it as follows: 
From terminal E5 (FIGURE 4 J), the method 400 proceeds to decision block 490 where a 
test is made to determine whether each evaluated binary phrase is greater than 0. If the answer is 
NO, the method 400 proceeds to another continuation terminal ("terminal E6"). If the answer to 
the test at decision block 490 is YES, access to the piece of content, such as the piece of 
content 326, is granted to the user associated with the accessor. See block 492. Another test is 
made at decision block 494 to determine whether there are more access requests. If the answer is 
YES, another continuation terminal ("Terminal El") is entered by the process 400 which loops 
back to decision block 472 where the above-identified processing steps are repeated. Otherwise, 
the answer is NO, and the exit terminal F is entered by the method 400. 



LAW OI'KICl'S OF 
CHRIS TENSEN O'CONNOR JOHNSON KINDNESS'" 0 
1420 Fifth Avenue 
Suite 2800 
Seattle, Washington 98101 
-3- 206 682.8100 

MSMX20575AM DOC 



